Efficient Quantum Algorithm for Hidden 
Quadratic and Cubic Polynomial Function Graphs 



We introduce the Hidden Polynomial Function Graph Problem as a natural gener- 
alization of an abelian Hidden Subgroup Problem (HSP) where the subgroups and their 
cosets correspond to graphs of linear functions over the finite field ¥ p . For the Hidden 
Polynomial Function Graph Problem the functions are not restricted to be linear but 
can also be multivariate polynomial functions of higher degree. 

For a fixed number of indeterminates and bounded total degree the Hidden Poly- 
nomial Function Graph Problem is hard on a classical computer as its black box query 
complexity is polynomial in p. In contrast, this problem can be reduced to a quantum 
state identification problem so that the resulting quantum query complexity does not 
depend on p. For univariate polynomials we construct a von Neumann measurement 
for distinguishing the states. We relate the success probability and the implementation 
of this measurement to certain classical problems involving polynomial equations. We 
present an efficient algorithm for hidden quadratic and cubic function graphs by estab- 
lishing that the success probability of the measurement is lower bounded by a constant 
and that it can be implemented efficiently. 



Shor's algorithm for factoring integers and calculating discrete logarithms [18] is one 

of the most important and well known examples of quantum computational speedups. 
This algorithm as well as other fast quantum algorithms for number-theoretic problems 
[9j Uni HZ] essentially rely on the efficient solution of an abelian hidden subgroup prob- 
lem (HSP) [3]. This has naturally raised the questions of what interesting problems 
can be reduced to the nonabelian HSP and of whether the general nonabelian HSP can 
also be solved efficiently on a quantum computer. 

It is known that an efficient quantum algorithm for the dihedral HSP would give rise 
to efficient quantum algorithms for certain lattice problems |16j . and that an efficient 
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1 Introduction 




quantum algorithm for the symmetric group would give rise to an efficient quantum 
algorithm for the graph isomorphism problem [6j. Despite the fact that efficient algo- 
rithms have been developed for several nonabelian HSPs (see, for example, [13] and the 
references therein), the HSP over the dihedral group and the symmetric group have 
withstood all attempts so far. Moreover, there is evidence that the nonabelian HSP 
might be hard for some groups such as the symmetric group [llj . 

Another idea for the generalization of the abelian HSP is to consider Hidden Shift 
Problems [31 [7] or problems with hidden non- linear structures [5]. In the latter context, 
we define a new black-box problem, called the Hidden Polynomial Function Graph 
Problem, and present efficient quantum algorithms for special cases. More specific, the 
Hidden Polynomial Function Graph Problem is a natural generalization of the abelian 
HSP over groups of the special form G := F™ +1 , where the hidden subgroups are 
generated by the m generators (0, . . . , 1, . . . , 0, qi) £ F™ +1 with qi S F p and the 1 is 
in the ith component. Therefore, the hidden subgroups Hq and their cosets Hq z are 
given by 

H Q := {(x, Q(x)) :x£F™} and H Q>Z := {(x, Q(x) + z) : x € F™} , 

where z £ ¥ p and Q runs over all polynomials Q{X\, . . . , X m ) = q±X± + . . . + q m X m . 
In the Hidden Polynomial Function Graph Problem the polynomials are no longer 
restricted to be linear but can also be of degree n > 2. The subgroups and their cosets 
are generalized to graphs of polynomial multivariate functions going through the origin 
and to translated function graphs, respectively. 

Our approach to solve this problem on a quantum computer is to generalize standard 
techniques for the HSP. First, we reduce the problem to a quantum state identification 
problem and show that the resulting quantum query complexity does not depend on 
p. Second, we design a measurement scheme for distinguishing the quantum states in 
the univariate case. Third, we relate the success probability and implementation of the 
measurement to certain classical problems involving polynomial equations. 

The paper is organized as follows: In Section 2 we define the Hidden Polynomial 
Function Graph Problem and compare it to the Hidden Polynomial Problem studied 
in Ref. [5]. In Section 3 we show that the standard approach for HSPs can be used to 
reduce the new problem to a state distinguishing problem. In Section 4 we derive upper 
and lower bounds for the query complexity for this approach. In Section 5 we discuss 
the properties of the states for univariate polynomials and construct measurements 
to distinguish these states. In Sections 6 and 7 we discuss the cases of quadratic 
and cubic univariate functions thoroughly and show that an efficient solution for these 
special cases exists. In Section 8 we conclude and discuss possible objectives for further 
research. 

2 Hidden Polynomial Function Graph Problem 

Definition (Hidden Polynomial Function Graph Problem): 

Let Q(X\, X2, . . . , X m ) £ ¥ p [Xi, X2, ■ ■ ■ , X m ] be an arbitrary m-variate polynomial of 
total degree at most n whose constant term is equal to zero. Let B : F™ +1 — > F p be a 
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black-box function hiding the polynomial Q in the following sense: 

B(r 1 ,r 2 , ... ,r m ,s) = B(fi,f 2 , . . . ,f m ,s) 

iff there is an element z 6 F„ smc/i i/iai 

s = Q(n,r 2 , ...,r m )+z and s = Q(fi,f 2 , ...,f m ) + z, 

i.e., the function B is constant on the subsets 

Hq, z := {(ri,r 2 , • • • , r m , Q(n, r 2 , . . . ,r m ) + z) : n,r 2 , • • • ,r m € F p } 

o/F™ +1 and distinct for different values of z. 

The Hidden Polynomial Function Graph Problem is to identify the polynomial Q if 
only the black-box function B is given. An algorithm for m-variate polynomials with 
total degree less or equal to n (where n and m are both constant) is efficient if its 
running time is poly logarithmic in p. 

An alternative definition of the function B is 

B(n,r 2 , ...,r m ,s) := ir(s - Q(n,r 2 , r m )) 

where n is an unknown and irrelevant bijection tt : F p — > ¥ p which permutes the 
elements of F p arbitrarily. 

The classical query complexity of the Hidden Polynomial Function Graph Problem 
is polynomial in p. This is because for univariate polynomials (i.e., m = 1) at least n 
different points 

(rW,sW),...,(rW,s (n) ) with B(r {1 \ s {1) ) = . . . = B(A n \ s {n) ) 

are required in order to determine the hidden polynomial Q of degree n. The probability 
of obtaining such an n-fold collision is smaller than the probability of obtaining a 2-fold 
collision. The probability of the latter is 1/p. 

The Hidden Polynomial Function Graph Problem is related to the Hidden Polyno- 
mial Problem defined in [5] which can be equivalently reformulated as follows. The 
black-box function h : F™ — » ¥ p is given by h(ri, . . . , r m ) := a(Q(r\, . . . , r m )), where o 
is an arbitrary permutation of F p and Q(X\, . . . ,X m ) is the hidden polynomial. It is 
readily seen that the black-boxes h can be obtained from the black-boxes B by query- 
ing B only at points of the form (n, . . . , r m , 0). For this reason the black-boxes B 
offer more flexibility in designing quantum algorithms. We are able to design an effi- 
cient quantum algorithm for the black-boxes B hiding univariate quadratic and cubic 
polynomials, whereas no algorithms are known for the black-boxes h. 

3 Standard Approach 

Most quantum algorithms for HSPs are based on the standard approach which reduces 
black box problems to state distinguishing problems. We apply this approach to the 
Hidden Polynomial Function Graph Problem in the following. 
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• Evaluate the black-box function on an equally weighted superposition of all 
(n, r 2 , . . . , r m , s) £ F™ +1 . The resulting state is 

^ \n,r 2 , . . . ,r m ) ® \s) <g) |F(ri,r 2 , . . . ,r TO ,s)) 



v ^ ri,r 2 ,...,r m ,seF p 

• Measure and discard the third register. Assume we have obtained the result tt(z). 
Then the state on the first and second register is pq >z := \(t>Q, z ){4>Q,z\ where 

} := 7=^ X] \n,r2,---,r m )®\Q(r 1 ,r 2 ,...,r m ,s) + z) 

V r 1 ,r2,...,r rn £¥ p 

with the unknown polynomial Q hidden by B, and z is uniformly at random. The 
corresponding density matrix is 

PQ ■= ~ X) l&?.*)(&J,*l ■ (!) 



We refer to the states pq as polynomial function states. We have to distinguish 
these states in order to solve the black box problem. 



4 Quantum Query Complexity 

We show that the quantum query complexity of the Hidden Polynomial Function Graph 
Problem is independent of p. To prove this result we make use of the upper and lower 
bounds of Ref. [12] on the number of copies required for state discrimination. The 
former is expressed in terms of fidelity which can be bounded by the following technical 
lemma. 

Lemma 1: Let p and a be two quantum states with corresponding spectral decomposi- 
tions p = and a = Ylj Hj\4>j){4>j\- Assume that maxjj |(^i|</>j)| < a for 
some value a. Then we have 



F(p, a) < a ■ min < 



E^-E 



where F(p,a) := Hi/pV^lll ^ s ^ e fidelity of p and a. 
Proof. We have 

[|Vp|0i)(0i|||i<a (2) 
for all i. This is derived by observing that ||y / p|^j)(0j| ||i = [|-v/7>|0i)ll an d 

2 



n^i^)ii 2 <E A ^^i^)i 2 ^« 2 
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Using first the triangle inequality and then Eq. ([2]) we obtain 

HvW^lli = \\y/pY^V^j\^j)(^j\\h < ^V^\\Vp\^j)( ( t ) j\h = a - [Ylv^\ • ( 3 ) 

3 3 \ 3 J 

The same arguments apply if we use the spectral decomposition of p instead. This 
completes the proof. □ 

Corollary 1: We have F(pq,Pq) < n/^/p, where pq and pq are two different polyno- 
mial states and their total degree is at most n. 

This corollary follows by observing that 
K^<3,*l^,z)l = (Q( r i,---,r m ) + z\Q(n,...,r m ) + z) 

ri,...,r m &p 

= — |{(n,...,r m ) eF p m : Q(n, . . . ,r m ) + z = Q(n, . . . ,r m ) + S}\ 

The last inequality follows from the Schwartz-Zippel theorem saying that two different 
m-variate polynomials of total degree less or equal to n can intersect in at most np m_1 
points [To] . 

Theorem 1: The query complexity of the Hidden Function Graph Problem is at most 

4( n + m ) 
v m ) ' 

Proof. The results in [12] imply that there is a POVM {Eq} acting on k copies of a 
polynomial function state such that 

Success := mmTr(p® k E Q ) > 1 - e 
Q 

provided that k > 2(logA^ — loge)/(— logF), where N := p^ « / is the number 
of different polynomial function states and F is the maximal fidelity over all pairs of 
different polynomial function states. This bound and the lower bound on the fidelity 
F < n/ ' yjp imply that the success probability P S uccess is at least 1/2 for k = 4( n ^ m ) 
(provided that p is sufficiently large). □ 

The lower bound presented in [12] implies that at least ( n ^ m ) /m — 1 copies are 
required to have -Psuccess > 1/2. 

5 Distinguishing Polynomial Function States 

In the remainder of the article we consider only the univariate case, i.e., m = 1. 
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Structure of Polynomial Function States The states pn z can be written as 
PQ,z = ~ E \b)(c\®\Q(b) + z)(Q(c)+z\. 

1 b,ce¥ p 

The density matrix pq of Eq. ([T]) is the average of these states over z. To obtain a 
compact notation we introduce the cyclic shift S p \x) := \x + 1 mod p) for which we 
have the identity 

E \b + z)(c + z\=S b p - c . 

zSF p 

This directly leads to 

P b,ce¥ p 

Now we use the fact that the shift operator and its powers can be diagonalized 
simultaneously with the Fourier matrix F p := y/l/p Ylk e& p i- e -> we bave 

F P S$F}= £>f |«)H, 

where oj p ■= e 2 ™/? is a pth root of unity. Hence, the density matrices have the block 
diagonal form 

p Q :={I P ®F p )p Q {I p ®Fl) = \ u? {h) - Qic)]x \b)(c\®\x)(x\ 

^ b,c,x&p 

in the Fourier basis where I p denotes the identity matrix of size p. 

By repeating the standard approach k times for the same black-box function B, we 
obtain the density matrix p~Q k . After rearranging the registers we can write 



Pf = 4if E ^ l[Q(6jKQ(C3)]X ^)(c|^|x)(x| 

b,c,x&* 

= £ E ^^•^ww.ww 

= "4 E ^ ffl * (B)(6) "* ( " )(c)|a!> l&><c|®|x><x|, 



where $( n )(6), $>( n \c), and |x) are defined as follows: 

• (q\ '■= (<?i!<?2> • • • , In) £ Fp Xn is the row vector whose entries are the coefficients 
of the hidden polynomial Q(X) = Yl"i=l H-^ 1 , 
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<J>(™)(5) is the n x k matrix 





/ 61 


6 2 • 




n k 

:=£X>}|i)01 = 




6| • 




i=l i=i 


V 


°2 





• |x) := (x\, . . . , Xfc) T G Fp is the column vector whose entries are those of x. 

Algebraic-geometric problem We simplify the techniques of [H [2j [3] and use them 
to construct a von Neumann measurement for distinguishing the states p~Q k . Let w := 
(wi, . . . ,w n ) G F™ and \w) G F™ be the corresponding column vector. Consider the 
algebraic-geometric problem to determine all b G F^ for given x G F^ and to £F™ such 
that $( n )(6)|x) = 1 



i.e., 






( 61 








61 • 


• b\ 


V 6? 


°2 


■ bl) 



( Xx \ 

X2 



( W\ \ 

w 2 



We denote the set of solutions to these polynomial equations and its cardinality by 
S* := {6 G Fp : S>W(b)\x) = \w}} and ^ == 1^1 , 

respectively. We also define the quantum states \S^) to be the equally weighted super- 
position of all solutions 

: = 4? E i 6 > 



best 



if 7]^ > and to be the zero vector otherwise. Using this notation, we can express 



the state off 



as 



Measurement for distinguishing the polynomial states The block structure of 



the states p~Q k implies that we can measure the second register in the computational 
basis without any loss of information. The probability of obtaining a particular x is 



»(if(v«^i))4E 



X = J_ 

p^ z — ' P K 



and the resulting reduced state is 

PQ--=^k E w<«l»>-<«l°>v^?|SS><5?| 



(4) 



w,v£FZ! 
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In the following we assume that for a result x and all w the cardinality r/^, is at 
most poly logarithmic in p and that the elements of the sets can be computed 
efficiently. In this case we have an efficiently computable bijection between and the 
set {(w,j) : j = {0, . . . , rf^ — I}}. This bijection is obtained by sorting the elements 
of S^j according to the lexicographic order on and associating to each b G the 
unique j £ {0, . . . , 77^, — 1} corresponding to its position in S^. We rely on this bijection 
to implement a transformation U x satisfying 

U X \S%) = \w) 

for all (x, w) with 77^ > 0. This is done as follows. 
• Implement a unitary with 

1 1 ^ 

-sf E i 6 > ® i°) ® i°) -> ® E ® k> ■ ( 5 ) 



Note that 6 and x determine j and w uniquely and vice versa. Furthermore, we 
can compute w and j efficiently since rj^ is at most poly logarithmic in p. 

• Apply the unitary 

p k -i 

E (^+1 ® ^-/-i) ® + E v ® 

on the second and third register. This implements the embedded Fourier trans- 
form Fi of size I controlled by the second register in order to map the superposition 
of all \j) with j <E {0, ...,£- 1} to |0). The resulting state is \w) (g> |0) <g> \r)*}. 

• Uncompute \rjf u ) in the third register with the help of w and x. This leads to the 
state \w) ® |0) (g> |0) 

We apply U x to the state of Eq. ^ and obtain 

u x ~ P x Q ut = ± E ^'"^VWHH. 

We now measure in the Fourier basis, i.e., we carry out the von Neumann measure- 
ment with respect to the states 

m :=4sE4 9M h- 

Simple computations show that the probability for the correct detection of the state 



p 1 



The probability to identify Q correctly is obtained by summing the probabilities in 
Eq. ([6]) over all x for which we can implement the transformation U x and multiplying 
the sum by l/p k . 
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6 Hidden Quadratic Polynomials 



For a single copy of the polynomial function state pq it turns out that the pretty good 
measurement |13j is the optimal measurement for distinguishing the states. However, 
the resulting success probability is only in the order of 1/p. In contrast, the success 
probability of our measurement scheme for two copies is lower bounded by a constant. 
This strongly resembles the situation for the Heisenberg-Weyl HSP, where a single copy 
is also not sufficient but the pretty good measurement of two copies leads to an efficient 
quantum algorithm [2]. 

For quadratic polynomials we have to consider the sets 

We set b = b\, c = b 2 , x = x%, y = X2, v = w\, and w = w 2 to avoid too many indices. 
Therefore, we have to find the set of solutions of the equations 

bx + cy = v and b 2 x + c 2 y = w . (7) 

Depending on x and y which are determined by the orthogonal measurement in the 
first stage as well as by v and w the set of solutions can encompass 0, 1, 2, p or p 2 
solutions. To derive a lower bound on the success probability it suffices to consider the 
p 2 — 3p + 2 cases where x,y 7^ and x ^ — y. In these cases the Eqs. ([7]) have the 
solutions (b-i , c,- ) with 



provided that 



C1/2 := — - — ± ^J~D and 6i/ 2 = — — — Ci/ 2 

' x + y x + y 1 x x ' 



D := —w((x + y) — v ) 
V 



is a square in ¥ p . For each pair (x,y) there are p(p + l)/2 pairs (v,w) such that the 
resulting D is a square. In this case, there are one or two solutions. Therefore, we have 
the following lower bound on the success probability 




4 \p 

We now argue that the measurement can be implemented efficiently. Following the 
discussion of Sec. 5 we only have to show that we can implement the transform of ([5]) 
efficiently, i.e., given x, y, b and c we must find the index of the solution (6, c) to Eqs. ([7]) 
efficiently. This is possible since the solutions of the p 2 — 3p + 2 considered cases can 
be computed with 0(log(p)) operations on a classical computer (see Cor. 14.16 in [8]). 



7 Hidden Cubic Polynomials 



For cubic polynomials we obtain the sets 

h\ ( h 

b 2 I G 

h 



bl 



bl 
bl 





(8) 
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To simplify the following computations we assume that x% 7^ 0. Therefore, the set of 
Eq. d8]) can be written as 

^'H i ' I €F;!: I 6 2 c 2 % I • j x I - j r \\ (9) 









(1 













& 3 

with k := (l,x,y), A := (u,v,w), and the coefficients 

x 2 £3 wi w 2 , w 3 

x := — , y := — , u := — , v := — , and w := — . 

Xl Xl Xl Xl Xl 

In the appendix we show that for 

x/0,±l and y ^ 0, -1, -x, ±{x + 1) (10) 
and for all u,v,w the inequality 

^ < 10 (11) 

holds for the size 77? of the sets of Eq. Q. This bound now implies that for all pairs 
(x,y) there are at least p 3 /W tuples (u,v,w) with r)% > 1 because of the equality 

XI ^ = P 3 • 

AGF3 

We obtain a lower bound on the success probability -P S uccess f° r our measurement 
scheme as follows. First, we discard all tuples (sci, X2, X3, w\, W2, W3) with xi = 0. This 
leads to 

2 



p 

1 success 



1 V V / (^1^2,^3) 



> v - 1 I . L(M,») 



ri { ' x ' y > 
I / / y l(u,v,w) 



P 9 , 



Second, we take the disequalities (|10p into account and obtain 



(p-l) (p 2 -8p + 16) / ^ /j 1>x , y) 

1 siir.rpss 



<u,v,w£Wp 



because there are (p — 3)(p — 5) + 1 pairs (x, y) which satisfy these disequalities. Third, 
we lower bound the sum by p 3 /10 and obtain 

(p-l)(p 2 -8p + 16) fp 3 \ 2 1 (1 



^success ^ n I 1 n ) — 1 nn O 

p y \i0/ 100 \p 

Therefore, the success probability can be lower bounded by a constant for sufficiently 
large p. Furthermore, the computations in the appendix show that we find the solutions 
of the polynomial system ([9]) by solving univariate polynomials of degree six or less. 
This leads to an efficient quantum algorithm because the roots of these polynomials 
can be computed with a polylogarithmic number of operations. 
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8 Conclusion and Outlook 



We have introduced the Hidden Polynomial Function Graph Problem as a general- 
ization of a particular abelian Hidden Subgroup Problem. We have shown that the 
standard approach for HSPs can be successfully applied to this problem and leads to 
an efficient quantum algorithm for quadratic and cubic polynomials over prime fields. 
A generalization of all the methods to non-prime fields F^ is straightforward. The 
Fourier transform over F p has to be replaced by the Fourier transform over F^ which 
can be implemented efficiently [7j. 

The central points of interest for future research are the generalization to polyno- 
mials over rings (admitting a Fourier transform), polynomials of higher degree, multi- 
variate polynomials, and a broader class of functions. Moreover, it would be important 
to find real-life problems which could be reduced to our black-box problem and the 
problems defined in [5]. 

The authors acknowledge helpful discussions with D. Bacon and D. Janzing. TD 
was supported under ARO/DTO quantum algorithms grant number W911NSF-06-1- 
0379. 

A Analysis of the Cubic Case 

In this appendix we use Buchberger's algorithm^ to show that the ideal that is generated 
by the polynomials of Eq. ([9]) contains the elements 

b + xc + yd — u = 
c + g 1 d 5 + g 2 d /k + g 3 d 3 + g i d 2 + g 5 d + g 6 = 
d 6 + hid 5 + h 2 d 4 + h 3 d 3 + h A d 2 + h 5 d + h 6 = 

for a subset of the tuples (x,y,u,v,w) which we refer to as regular cases. From these 
equations inequality (jlip follows directly because there are at most six solutions for d 
and each value of d determines b and c uniquely. Additionally, we consider non-regular 
cases in order to establish the inequality for all (x, y, u, v, w) with certain x and y. In 
the latter cases we obtain at most ten solutions since there are at most five possible 
values for d and for each of those values there are at most two pairs (b, c) which lead 
to a solution of the system. 

A.l Buchberger's Algorithm in Regular Cases 

Before computing S-polynomials following Buchberger's algorithm we reduce the poly- 
nomials of Eq. ([9]) with the linear polynomial, i.e., we eliminate b in the second and 
third polynomial equation with the substitution 

b = u — xc — yd . 
We use the lexicographical order of monomials. 



11 



This leads to the equations 



c 2 + c\cd + c 2 c + c-sd 2 + c^d + C5 
c 3 + c?ic 2 (i + d 2 c 2 + c^cd 2 + d 4 cd + d§c + d^d 3 + djd 2 + ds<i + ^9 

with the coefficients 



(12) 
(13) 



ci 
C5 

c/ 8 



2y 
x+l 


C2 


_ -2u 
x+l 


2 




Sxy 


x(a:+l) 


■~ l-x 2 


6uy 


d 5 


-3« 2 


1-x 2 


l-x 2 


-3u 2 y 


d 9 


u s —w 


x(l—x 2 ) 


x(l—x 2 ) 



C.3 
d 2 

d 6 



x(x+l) 
3ux 

y^-y 2 ) 

x(l— x 2 ) 



2uy 



c 4 :■■ 
d-3 : = 



.r:r ■ I : 
-3j/ 2 



l-x 2 
A ._ 3m/ 
" 7 - — x(l-x 2 ) 



Here and in the remainder of this section we assume that all occurring denominators 
are unequal to zero. We reduce Eq. (I13p with Eq. (|12p and obtain the polynomial 



cd 2 + e\cd + e2C + 63d 3 + e 4 d 2 + e$d + e$ 



where we have 
ei 

e5 



di-cid 2 — C2rfi-C4+2cic 2 

rf6-C3Q!l+ClC3 

cig— C4C?2— C5di+CiC5+C2C4 
d3-cidi-C3+c 2 



e2 := 
e 4 := 
e 6 := 



d 5 -C2d2-C5+e^ 

d-j — C3 <fe - Cjdi +Cl C4 +C2 C3 

(23-cig(i-C3+c 2 
d9-C 5 d2+C2C5 
d3-ci^l-C3+c 2 



After these reductions we compute the reduced S-polynomial 

cd + / lC + f 2 d 4 + / 3 d 3 + / 4 d 2 + fed + fe 

of the polynomials (JT2J) and fH]) . We have the coefficients 

e$ — e 2 e± + e\e 2 e^ 



fi 
h 
fs 

h 
h 
h 



e 5 - eie 4 - e 2 e 3 + e{ e 3 
ej ~ cie 3 + c 3 
e 5 - eie 4 - e 2 e 3 + ef e 3 
2e 3 e 4 - cie 4 - eie§ - c 2 e 3 + c 3 ei + c 4 

e 5 - eie 4 - e 2 e 3 + efe 3 
e3e5 - cie 5 + e 2 - eie 3 e 4 - c 2 e 4 + c 3 e 2 + c 4 ei + c 5 

e 5 - e x e 4 - e 2 e 3 + efe 3 
e 3 e 6 - cie 6 + e 4 e 5 - eie 3 e 5 - c 2 e 5 + c 4 e 2 + c 5 ei 

e 5 - eie 4 - e 2 e 3 + ef e 3 
e 4 e 6 - eie 3 e 6 - c 2 e 6 + c 5 e 2 



e 5 - eie 4 - e 2 e 3 + ef e 3 
The reduced S-polynomial of the polynomials (|14p and (JT^D is 

c + gid 5 + g 2 d 4 + 53d 3 + g^d 2 + £r 5 d + g 6 



(14) 



(15) 



(16) 



12 



where we have 



9i ■-- 
94 ■-- 



h 



/f-ei/i+e 2 
/s-/i/4+ei/4-e4 
/i 2 -ei/i+e2 



92 ■-- 
95 ■-- 



/3-/l/2+ei/2 
/i-ei/i+e 2 
/6-/i/5+ei/5-e 5 
/j , -ei/i+e 2 



53 - 
56 - 



f'f-eifi+e 2 
/i/6-ei/6+e 6 
/l -ei/i+e 2 



The reduced S-polynomial of the polynomials in Eq. (|15p and (|16p is 



d 6 + /lid 5 + /i 2 d 4 + h 3 d 3 + /i 4 d 2 + /i 5 d + h 6 



(17) 



with the coefficients 



hi := 32±lMi 

91 

U .— ff5+/ig4-/4 
4 ' 9i 



h 2 
h 5 



33+/lg2-/ 2 
91 



h 3 
he 



94 + f 193- f 3 

1196-16 
91 



After this step we stop Buchberger's algorithm since the S-polynomials (|16|) and (fTj 
are the polynomials we are looking for. This computation is only possible for regular 
tuples (x,y,u,v,w), i.e., all denominators are non- vanishing. 



A. 2 Characterization of Regular Cases 

In the preceding section, all denominators are unequal to zero if the disequalities 
0^x(x + l) 0/x(l-x 2 ) 



0^d 3 - cidi -c 3 + c\ 
+ ft - ei/i + e 2 



0^5- eie 4 - e 2 e 3 + e 2 e 3 
0^51 



are satisfied. The substitution of Cj, dj, ej, /i, and g\ with their expressions in 
x, y, u, v, w leads to the disequalities 

+ x(x + 1) 

/ x{l-x 2 ) 

/ y(y + x + l) 

7^ (y — x — l)(vy + vx + v — u 2 ) 

^ (r 3 u 3 + r 2 v 2 + rif + r )(x + 1) 

/ (y + l)(y + x) 

where we have the coefficients 

ro := w 2 xy 3 + w 2 y 3 + 2w 2 x 2 y 2 + 4w 2 xy 2 + 2w 2 y 2 + w 2 x 3 y 

ry cy r\ q r> Q 

+3w x y + 3w xy + 4u wxy + w y + 4u wy + u 
r\ := — 3u(y + x + l)(2wxy + 2wy + u 3 ) 
r 2 := 3u 2 (y 2 + xy + y + x 2 + 2x + 1) 
r 3 ■= ~{v ~ x - l) 2 (y + x + 1) 

For the following analysis we separate the factors of the disequalities into two sets: The 
first set contains all factors which only depend on x and y and the second set contains 
all factors which also depend on u, v, or w. 
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A. 3 Analysis of Non-Regular Cases 

In this section we discuss the polynomial system for non-regular tuples (x,y,u,v,w), 
i.e., one or more of the denominators of Sec. IA.ll vanish. We assume that all factors of 
the denominators which solely depend on x and y are unequal to zero since the other 
cases can be discarded in the analysis of Sec. [71 The remaining disequalities which 
depend on the u, v, and w are 

7^ v {y + x + 1) — u 2 and ^ r 3 v 3 + 2 + r\v + tq . 

First, we assume that v(y + x + 1) — u 2 = 0. Then Buchberger's algorithm leads to 
the polynomial system 

b + xc + yd — u = 
cd 2 + c\cd + e2C + e 3 d 3 + e^d 2 + e§d + = 
fic + hd 4 + f 3 d 3 + Ud 2 + hd + f 6 = 

where we have 

fj ■= (es ~ eie 4 - e 2 e 3 + eje 3 )fj 
with the fj of Section IA.1I If f\ ^ then we substitute c in the second equation with 

c = -i (f 2 d 4 + f 3 d 3 + hd 2 + hd + ft 
Ji v 

This substitution leads to a polynomial in d which always has degree six since 

(y + l)(y + x) 



h 



(x — l) 2 x 



is always non-zero for the x and y we consider. Hence, there are at most six solutions 
for d and inequality (jlip also holds in this non-regular case because b and c are uniquely 
defined by the value of d. For f\ = we have the system 

b + xc + yd — u = 
cd 2 + c\cd + e2C + e 3 d 3 + e^d 2 + e$d + = 
f~2d A + f 3 d 3 + hd 2 + f 5 d + h = 

where again / 2 7^ is always true. In this case there are at most four solutions for d. 
Furthermore, it follows from Eq. (|12p that for each value of d there are at most two 
solutions for c. Since b is uniquely defined by c and d there are at most eight solutions. 

For v(y + x + l) — u 2 ^ Owe consider the case r 3 v 3 + v^v 2 + r\V + vq = 0. We obtain 
the reduced S-polynomial 

g x d 5 + g 2 d 4 + g 3 d 3 + g 4 d 2 + fed 1 + g 6 (18) 

where we have the coefficients 

9j : = (/i - ei/i + e 2 )gj 
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with the gj of Section IA.11 There are always at most five solutions for d since 

- = -y(y + l){y + x)(y + x + l) 2 

x(x — l)(y — x — l)(vy + vx + v — u 2 ) 

shows that polynomial (|18p is not the zero polynomial. Therefore, the system has at 
most ten solutions as the discussion of the preceding case shows. 
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